$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft File: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft (raw, json) Hash identifier: pxKhvmYxb/oaEvspSj3BSEDz7bBvT+ERdIV1XGsfKn4= Subject key identifier: 5D:C5:E9:3E:9C:05:3A:7E:43:0A:48:D1:04:C4:93:D7:16:F7:84:8F Authority key identifier: A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA Certificate issuer: /CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft Manifest number: 0169 Signing time: Wed 13 Aug 2025 04:26:22 +0000 Manifest this update: Wed 13 Aug 2025 04:26:21 +0000 Manifest next update: Wed 20 Aug 2025 04:26:21 +0000 Files and hashes: 1: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl (hash: jX9p5jfMXXiFWCm9KWrZm/TK9uiSXibAEk94okfSDMI=) 2: 599F65C652C011EEAAE0CD34C4F9AE02.roa (hash: RkTUA678ggeVul1y+nwQF7cmzTi/KyCvH3jL9UTL73c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 04:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5804, serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Validity Not Before: Aug 13 04:26:21 2025 GMT Not After : Aug 20 04:26:21 2025 GMT Subject: CN=689c13ee-2145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:c6:24:32:20:b6:b0:06:f4:6e:32:71:e2: 7e:27:b7:0a:5d:33:bb:b5:b6:83:4f:10:b7:43:cd: 53:8d:39:63:c1:0c:d1:01:fc:60:cd:9e:ce:fc:c4: 5e:12:48:6e:a4:4f:be:a9:b6:a1:03:6b:2a:c4:5f: fa:3f:44:d9:51:c9:88:12:0f:20:0c:f3:ae:df:70: 1a:26:bc:06:c9:81:60:78:53:3f:03:ed:fa:2b:dc: b2:ff:17:ff:9a:b6:85:74:f6:e3:e4:24:be:75:ce: d6:c0:78:bc:88:ea:19:c5:fc:63:b7:92:89:da:d5: 45:41:ca:8e:18:7b:3c:76:60:15:ac:e1:e7:79:cc: 33:e2:ed:de:73:4d:8f:8b:a5:b2:33:65:97:95:81: 73:4c:43:5f:40:0e:f2:70:dc:3d:af:5d:7a:15:83: 9f:d1:cd:4d:cf:fc:97:24:47:52:d4:98:7c:92:d1: bc:f1:49:73:32:9d:19:c6:07:3e:aa:fb:45:b9:c0: 9d:a9:3c:90:f7:64:c1:45:47:1a:f0:be:80:36:0f: 16:7a:33:96:71:a4:9f:9e:f7:8a:be:00:db:18:8c: 77:9c:b5:83:2c:44:85:3b:2c:8d:e9:c7:18:f3:21: d6:59:3d:83:81:db:74:c8:42:19:21:1a:56:80:98: a9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C5:E9:3E:9C:05:3A:7E:43:0A:48:D1:04:C4:93:D7:16:F7:84:8F X509v3 Authority Key Identifier: keyid:A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:59:15:68:1d:c3:31:16:35:a7:a8:3f:be:b8:c5:65:57:c6: 13:7f:74:aa:99:98:db:46:f5:df:66:b7:86:1a:53:15:96:1f: 7d:8a:38:b0:b0:cf:bf:a9:90:13:81:65:f5:78:a0:5f:66:d4: 15:a0:09:44:1a:af:70:36:33:8d:e6:10:24:74:80:75:bc:65: da:98:3a:e3:c8:6c:06:dd:7c:cb:25:00:c9:11:49:bf:af:65: 40:fe:97:54:6c:95:ed:3a:97:09:34:7b:06:f0:65:6f:15:55: 86:64:a8:34:4c:49:32:17:cf:56:49:d4:e1:7b:91:97:1c:10: 5e:20:89:e0:5f:fc:8c:e9:72:b7:73:ef:bd:5e:7b:c2:05:2a: e2:97:3b:96:25:71:6c:2d:42:f4:cf:94:9e:4a:46:9e:14:11: 12:99:a1:6f:3c:cf:61:b2:4d:3d:43:0f:94:2b:80:c8:f5:ed: af:2a:6f:0a:f6:cf:19:83:1e:43:ae:f8:f7:7e:73:4a:52:82: 3a:14:bf:4d:c5:86:49:9c:15:f6:a6:16:7a:0f:a4:3a:c0:9b: 88:5e:ea:fb:02:11:65:f2:97:ca:26:fe:0c:d5:a0:2e:1a:9e: 7e:da:39:c9:68:71:6b:3b:8d:a9:08:70:a0:28:82:5d:b1:d9: a7:c4:74:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4MDQxMTAvBgNVBAUTKEEwRkE2NkY2OTM0QUEyODEzRTFBMUYwMDczOTU5MEM2 MzU3RDQwREEwHhcNMjUwODEzMDQyNjIxWhcNMjUwODIwMDQyNjIxWjAYMRYwFAYD VQQDEw02ODljMTNlZS0yMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsF/GJDIgtrAG9G4yceJ+J7cKXTO7tbaDTxC3Q81TjTljwQzRAfxgzZ7O/MRe EkhupE++qbahA2sqxF/6P0TZUcmIEg8gDPOu33AaJrwGyYFgeFM/A+36K9yy/xf/ mraFdPbj5CS+dc7WwHi8iOoZxfxjt5KJ2tVFQcqOGHs8dmAVrOHnecwz4u3ec02P i6WyM2WXlYFzTENfQA7ycNw9r116FYOf0c1Nz/yXJEdS1Jh8ktG88UlzMp0Zxgc+ qvtFucCdqTyQ92TBRUca8L6ANg8WejOWcaSfnveKvgDbGIx3nLWDLESFOyyN6ccY 8yHWWT2Dgdt0yEIZIRpWgJipSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3F6T6c BTp+QwpI0QTEk9cW94SPMB8GA1UdIwQYMBaAFKD6ZvaTSqKBPhofAHOVkMY1fUDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgwNC9DMjEzOEQ0MDUy QkYxMUVFOEU0NEFBMUJDNEY5QUUwMi9vUHBtOXBOS29vRS1HaDhBYzVXUXhqVjlR Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29QcG05cE5Lb29FLUdoOEFjNVdReGpWOVFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTgwNC9DMjEzOEQ0MDUyQkYxMUVFOEU0NEFBMUJDNEY5QUUwMi9vUHBtOXBOS29v RS1HaDhBYzVXUXhqVjlRTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaWRVoHcMxFjWnqD++uMVlV8YTf3SqmZjbRvXfZreGGlMVlh99ijiw sM+/qZATgWX1eKBfZtQVoAlEGq9wNjON5hAkdIB1vGXamDrjyGwG3XzLJQDJEUm/ r2VA/pdUbJXtOpcJNHsG8GVvFVWGZKg0TEkyF89WSdThe5GXHBBeIIngX/yM6XK3 c++9XnvCBSrilzuWJXFsLUL0z5SeSkaeFBESmaFvPM9hsk09Qw+UK4DI9e2vKm8K 9s8Zgx5Drvj3fnNKUoI6FL9NxYZJnBX2phZ6D6Q6wJuIXur7AhFl8pfKJv4M1aAu Gp5+2jnJaHFrO42pCHCgKIJdsdmnxHQC -----END CERTIFICATE-----Generated at Wed Aug 13 05:34:05 2025 by rpki-client